CVE-2025-1958 in oa_systeminfo

Zusammenfassung

von MITRE • 05.03.2025

A vulnerability, which was classified as critical, has been found in aaluoxiang oa_system 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

VulDB

Veröffentlichung

05.03.2025

Moderieren

akzeptiert

Eintrag

VDB-298559

CPE

bereit

Exploit

Download

EPSS

0.00530

KEV

nein

Aktivitäten

very low

Quellen

Do you want to use VulDB in your project?

Use the official API to access entries easily!